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1 Introduction 



The hidden subgroup problem has found recent interest in the theory of quantum 
computing. This is due to the fact that the power of quantum computation 
compared to classical computation becomes apparent in this problem. 

The first occurrence of a hidden subgroup problem for an abelian group ap- 
peared has been implicitly in Simon's work ||14j| . In fact he solved the hidden 
subgroup problem for the group under the promise that the hidden subgroup 
is of order 2. The group theoretical interpretation of this algorithm has been 
formulated by several authors (see ||, U, [[[(J). I* 1 the P a P er h is shown 
that subgroups of arbitrary order can be found and furthermore that this can 
be done by an exact quantum polynomial time algorithm. Thus there is an ex- 
ponential speed-up of this quantum algorithm over any classical algorithm, even 
probabilistic ones. 

Recently the question has been raised as to whether the hidden subgroup 
problem could also be solved for non-abelian groups. In the paper H the problem 
is addressed for the dihedral groups D^. The authors have found an interesting 
way to circumvent the application of the Fourier transform for the dihedral groups 
and instead use the Fourier transform for x Z2 and still learn something 
from the probability distribution about the existence or non-existence of certain 
elements. However the classical post-processing requires an optimization problem 
which makes the overall algorithm exponential in the number of classical steps, 
but is polynomial in the number of evaluations of the quantum black-box circuit 
representing the given function. 

In this paper we will present a family W n of non-abelian groups for which 
the hidden subgroup problem can be solved by a number of steps polynomial in 
the number of qubits. The groups in this family are certain semi-direct products 
(namely wreath products) and have some desirable properties (they are, e.g., of 
bounded exponent). Moreover, the fact that a Fourier transform for W n can be 
performed efficiently by a quantum computer is important to solve the hidden 
subgroup problem for these groups. 



2 The Hidden Subgroup Problem 

We adopt the definition of the hidden subgroup problem given in . The history 
of the hidden subgroup problem parallels the history of quantum computing since 
the algorithms of Simon |TJ| and Shor can be formulated in the language of 
hidden subgroups (see e. g. for this reduction) for certain abelian groups. In 
the paper M an exact quantum algorithm (running in polynomial time in the 
number of evaluations of the given black box function and the classical post- 
processing) is given for the hidden subgroup problem in the abelian case. 
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Definition 2.1 (The hidden subgroup problem) 

Let G be a finite group and f : G — > R a mapping from G to an arbitrary domain 
R fulfilling the following conditions: 

a) The function f is given as a quantum circuit, i.e., f can be evaluated in 
superpositions. 

b) There exists a subgroup U C G such that f takes a constant value on each 
of the cosets gU for g G G. 

c) Furthermore f takes different values on different cosets. 
The problem is to find generators for U . 

3 Wreath Products 

In this section we recall the definition of wreath products in general (see also 
[B] and ||) and define the family of groups for which we will solve the hidden 
subgroup problem. 

Definition 3.1 Let G be a group and H C S n be a subgroup of the symmetric 
group on n letters. The wreath product G I H of G with H is the set 

{{<p,h):heH,<p:[l,...,n]^G} 

equipped with the multiplication 

(y?i, hi) ■ (ip 2 , h 2 ) := {if), hih 2 ), 

where if) is the mapping which sends i i— > (pi(i h2 )(f2(i) for i G [1, . . . , n]. 

The wreath product is isomorphic to a semidirect product of the so-called base 
group N := G x . . . x G which is the n fold direct product of (independent) copies 
of G with H, in symbols G\H = N x H, where H operates via permutation of the 
direct factors of N. So we can think of the elements to be n-tuples of elements 
from G together with a permutation r and multiplication is done component- wise 
after a suitable permutation of the first n factors 

{gx, ...,g n ;r)- {g[, ...,g' n ; t ) = {g T >^)g[, g T >(n)g' n ; rr'). 
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4 The Wreath Products Zf I Z 2 

In the following we show some elementary properties of W n := T%\Li- The groups 
W n have exponent 4 and base-group N := x Z£. Elements of are denoted 
by (x, y; a) where i,t/ G and a G Z 2 . For a subgroup C/ and an element g G W n 
as usual we define U 9 := {g _1 ug : u G £/}. We think of the elements encoded in 
such a way that x and y are encoded in the lower significant bits and a is the 
most significant bit. We later need the important 

Lemma 4.1 Let U be a subgroup ofW n and t = (0,0; 1). Then 

u = (unN)-(unu t ). (l) 

Proof: "D" is clear since U C\ N and U HU* are subgroups of [/. 
"C": Let u G £/ be a given element. Since w G iV implies that w is contained in 
the left factor, we can assume that u ^ N, i.e., u — (x, y; 1) for certain x, y G ZJf. 
We compute 

m 2 = (x©y,x©y;0), M 3 = (y,x;l), w 4 = (0,0;0). 

Thus the effect of conjugating u with t is u* — (y, x; 1) from which we can deduce 
u G U* since m = (u 3 ) 1 G C/*. □ 

Remark 4.2 a) The preceding lemma shows that each subgroup U of W n 
factorizes in a canonical way into the product of two subgroups. Therefore 
it is sufficient to find generators for U fl iV and U D U* to obtain a set of 
generators for [/. 

b) The action on an element n = (x', y'\ 0) G of an arbitrary transversal 
element r = (x, y; 1) for which 

{1,t} 

holds, is given by 

r-W = (y, x; l)(x', y'; 0)(x, y; 1) = (y, x; l)(x © y', y © x'; 1) = (y', x'; 0), 
i.e., the components of n are swapped. 

c) From the isomorphism theorem for U C follows 

NU/N ^ C//C/ n iV. 

Thus the index of C/ D in U can be 1 or 2, since is a maximal normal 
subgroup of W n . So the subgroup U fl U* indicates whether the index is 1 
or 2 and the case of index 2 occurs iff there exists an element of the form 
(x,y; 1) in U. 
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d) If the index [U : U n N] = 2 then (U fl AT)* — U (1 N. This is readily seen 
from b) by observing the fact that there must exist an element of the form 
(a,6;l) G 17. 

e) We call subgroups fulfilling the property U = U l balanced. Later on the 
balanced subgroups of U will play an important role since they will appear 
naturally in the process of sampling. 




D 



nhd = ((w n ) = (w n y = $(w n ) 

E 

Figure 1: The wreath product W n factors over N and D 



4.1 Finding Involutions in W n 

In this section we present a straightforward method to find hidden subgroups of 
order 2 in W n ; i. e., if it is promised that U has order 2, then the generator of U 
can be found without invoking non-abelian Fourier transforms. 

Consider the restriction of / to the base group ZJ? x Z^: We can obtain a 
equal distributed superposition over the base group iV by application of the 2x2 
Hadamard matrix H on all qubits except for the most significant one. 

Then we use the quantum algorithm for the hidden subgroup problem for Z^ 71 
using only the first 2n bits. This gives generators for the group U fl N, so that 
the number of evaluations of / is linear in n (also the classical post-processing 
needs only a number of steps which is linear in n). 

Note that each element in iV has order 2 but there may be more involutions in 
W n . More precisely: Each involution is contained in iV or D where D is defined 
by 

D — {(x, x; a), where x G Z£ and a G Z 2 } 
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This is because of the observation that for an element (x, y; a) G W n 

(x, y; a) 2 = (x © y, x © y, 0) = (0, 0; 0) x = y 

holds. We also denote D by (ZgHZg) x Z 2 since the two factors are diagonal. 

Figure [3] shows the situation involving W n , N and D. Interestingly, the in- 
tersection of iV and D is the center ((W n ) of W n which coincides with the com- 
mutator W n ' and the Frattini subgroup $(W n ) of W n but these facts will not be 
used in the sequel. 

Since D is abelian we can solve the hidden subgroup problem for D by the 
usual abelian hidden subgroup algorithm. We do this by performing Hadamard 
transforms on the qubits representing y and a followed by controlled NOTs be- 
tween qubits Xi and yi for i — 1, . . . , n (see figure (§)). This is followed by the 
hidden subgroup algorithm for Z 2 +1 applied to the bits representing y and a. 



4.2 The Pairing on W n 

In view of the Fourier transform for W n to come we define (mimicking the abelian 
case) a pairing /i on W n which in turn allows the definition of " duals" needed to 
treat this case of non-abelian groups. 

Definition 4.3 We denote by \i : W n x W n — > Z 2 the pairing 



fi((x,y;a), (x',y';a')) := < 



E x i x 'i + E ViVi ■ a = a' = 
E x iVi + E x 'iVi ■ a®a' = 1 
E x i x 'i + E ViVi + 1 : a = a' = 1 



Like in the abelian case we denote suggestively the set of perpendicular ele- 
ments for a given U C W n by 

U x :={g eW n :VheU : n(g, h) = 0.} 

However, in general U 1 - will not be a group any more. We will also make use 
of a bijective mapping (which is of course not a homomorphism) ip : W n — > F2 n+1 
which sends 

(x.y.O) i— > (x.y.O) , 
u>: ) ' ) \( , where x,yeZ%. 

* (x,y;l) i-> (y,x, 1) ' y 2 

Using we can compute \i using the identity 

Vflf, heW n : fx(x, y) = (cp(g), p(h)) ¥ 2n+ 



i 

2 



which holds due to the construction of /i and (p. 

Here and in the following we let t denote the element (0, 0; 1) G W n . 
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Figure 2: Finding involutions in D 



Lemma 4.4 For a subgroup U ofW n the following holds: 

xeu 

Proof: Write U = (U D N) ■ (U D [/*). Two cases can occur: 

1. ) U — U DN (i.e. U is abelian). Then 

<p(U) = {(x hyi ,0) G ¥\ n+l : ( Xi , yi ;0) G U}. 

This is a linear subspace of F^™ 4 " 1 and since y JL U there exists v G <p(U) 
such that (ip(y),v) ^ 0. Invoking an F 2 -vector space argument we conclude 
E ue ^(C7)(^(y),^> = o. 

2. ) [/ = (C/nAQ U (UnN) -t with i = (a, 6; 1). Due to the preceding remark we 
have (U n TV)* = (U n TV), i. e., {(x t , y t ; 0) G C/ n N} = {(yi, x t ; 0)} and mapping 
via <f yields the decomposition of <p(U) into a vector space V and an affine space 

(p(U) = {(xi,yi;0)} U (b, a, 1) © {( yi , Xl ; 0)} , 

=:V =V 

since V is a balanced. 

If there exists, an element x E V with y JL x then XLev^V 9 ^/)) x ) = an< ^ 

also E* e y(My), (6, «, i)) + {<p(y),x)) = o. 

If no such element exists y is perpendicular on V and therefore necessar- 
ily (</?(y)>(M, 1)> = 1- This means that E* e y(M?/)> «> *)> + (^(j/),^)) = 

£ xev My),(M,i)> = o. D 

We state another useful property of // which will be needed later on. 

Lemma 4.5 Let U be a subgroup ofW n . If there exists an element of the form 
(x,y; 1) G U L then exactly half of the elements of U 1 - are in N. 
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Proof: This follows from the fact that for g G W n , h = (x, y; 1) and u = (x', y'; 0) 
we have: 

fi(g,u-h) = fi(g,u)® n(g,h), 
which follows from an easy computation. □ 

4.3 The Lattice of Balanced Subgroups 

We have introduced the pairing fi on W n with respect to which we can define 
orthogonal complements. However, as stated, for a given U the orthogonal com- 
plement U 1 - need not again be a group. 
For example in case of W\ we have 

U = {(0, 0; 1), (0, 1; 0)}, U 1 = {(0, 0; 0), (0, 0; 1), (0, 1; 1), (1, 0; 0)} 

and (0, 1; l) 2 = (1, 1; 0) £ U ± . But we have the following 

Theorem 4.6 Let U C W n be a subgroup and t = (0, 0; 1). Then 

U = U l <^ U x is a subgroup of W n . 

Proof: "=^": By looking at the linear equations defining U ± when we employ 
the bijection <p, we firstly observe that U is again balanced: 



y%i Oi 



Z 2 2n + 1 



(2) 



If (x',y',a') is a solution of (0) then also (y',x',a') is a solution, since with each 
row (xi,yi,cii) we have also the row (yi,Xi,a,i) appearing. 

Now let g = (x%, y%, ai) and h = (x 2 , y 2 , a-i) be given elements from U^. 



(p(g ■ h) 



{x l ,y l ,a 1 )@{x 2 ,y 2 ,a 2 ), if a 2 = 
(yx,xx,ai) © {x 2 ,y 2 , a 2 ), if a 2 = 1. 



Since g G t/ -1 also (f/i,£i,ai) G C/ -1 , so for all it G /7 the following holds: 

(u?(a-h)u) I i( x ^y^ a i)^ u ) + (( x ^y2,a2),u), ifa 2 = 
\ ((yi, Xi,ai),u) + ((x 2 , 2/2,02), 11), ifa 2 = l 
= 
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Therefore g ■ h G U L . Closedness under taking inverses follows from the fact that 
elements u G W n are either involutions or u 3 = it -1 . 

"<=": It is sufficient to show that U 1 - is balanced since {U^) 1 - = U. With- 
out loss of generality we can assume that U C N, since otherwise there exists 
(a, b; 1) G U from which we can deduce 

u (a,b;l) = u t 

for all u G Z7 and we will be 

done. 

So we have to show that there exists (a, b; 1) G U 1 - (then will by the same 
argument be balanced and correspondingly U, too). Looking at the equations 



Z 2 2n+l 



we see that such an element must exist since if (zi, . . . , z 2 2n, 0) is a solution, then 
(zi, . . . , z 2 2n, 1) will also be a solution. □ 
The following corollary summarizes some further properties of the pairing /i. 

Corollary 4.7 a) For all subgroups U C W n 

(uy = (u x y. 

b) Complements of intersections: 

(unuy = (u^i{uY) 



c) The balanced subgroups of W n correspond one-to-one to the balanced sub- 
spaces of¥ 2 2 n+1 . 

d) There is an inclusion-reversing anti-isomorphism _L on the lattice of bal- 
anced subgroups of W n which is a Galois correspondence. 

Proof: a) Follows from the fact that fx(x,x') = /^(a^a;'*) for all x,x' G W n . b) 
follows from linear algebra over F 2 , c) is just a reformulation of lemma |4.6| and 
d) is obvious. □ 



5 Fourier Transforms for Wreath Products 

In this section we show how to compute a Fourier transform for the groups W n 
effectively on a quantum computer. We want to do this in brief since the general 
recursive method to obtain fast Fourier transforms on a quantum computer de- 
scribed in |12[ can be applied directly in case of wreath products A I Z 2 where A 
is an arbitrary abelian 2-group (for efficient quantum transforms see also 
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The recursion of the algorithm follows the chain 



A I Z 2 > A x A > E, 

where the second composition factor is the base group. We first want to determine 
the irreducible representations of G := A I Z 2 . Let G* be the base group of 
G, i.e. G* = A x A. G* is a normal subgroup of G of index 2. Denoting 
by A = {xi, ■ ■ ■ ,Xk} the set of irreducible representations of A recall that the 
irreducible representations of G* are given by the set {xi <£> Xj '■ hj — 1, • • • , 
of pairwise tensor products (see, e.g., section 5.6). 

Since G* < G the group G operates on the representations of G* via inner 
conjugation. Because G is a semidirect product of G* with Z 2 we can write each 
element g 6 G as g — (oi, a 2 ; r) with oi, a 2 e A and we conclude 

(Xi ® X2) 9 = (x? 1 ® X2 2 ) r = (Xi ® x 2 ) T , 

i.e., only the factor group G/G* = Z 2 operates via permutation of the tensor 
factors. The operation of r is to map Xi ® X2 l— X2 ® Xi- 

Therefore it is easy to determine the inertia groups (see , for definitions) 
T p of a representation p of G*. We have to consider two cases: 

a) p = Xi®Xi- Then T p = G since permutation of the factors leaves p invariant. 

b) P = Xi ® Xjii 3- Here we have T p = G*. 

The irreducible representations of G* fulfilling a) extend to representations of 
G whereas the induction of a representation fulfilling b) is irreducible. In this 
case the restriction of the induced representation to G* is by Clifford theory equal 
to the direct sum Xi ® X2 © X2 ® Xi- 



Applying the design principles for Fourier transforms given in |12| we obtain 
the circuits for DFTvk„ in a straightforward way. In doing so it is necessary 
to study the extension/induction behaviour of representations of G* since the 
recursive formula 



DFT G , .0$(t)-DFT Z2 



provides a Fourier transform for G. Here $(£) denotes the extension (as a whole) 
of the regular representation of G* to a representation of G (see |L1]1 , [0], EH)- 111 
case of W n the transform DFT^* is the Fourier transform for Z 2 ™ and therefore 
a tensor product of In Hadamard matrices. 

The circuits for the case of W n are shown in figure |3|. Quantum circuits 
in general are built from certain gate primitives (see 0) and it is clear that 
the complexity cost for this circuit is linear in the number of qubits, since the 
conditional gate representing the evaluation at the transversal ® tgT $(£) can be 
realized with 3n Toffoli gates. 
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Figure 3: The Fourier transform for Z£ I 7-2 



Finally we give a slight modification of this circuit by performing the same 
matrix © tgT 3>(t) (which in this case is a permutation matrix) at the end yielding 



DFTV n := DFT G » • $(t) • DFT Za • $(t). 



(3) 



teT teT 
This again decomposes the regular representation of G into irreducibles and 



has the advantage to allow a reinterpretation of the pairing fi given in section [O 
for the groups W n : 

Multiplying the matrices in (|3|) yields (the permutation matrix II exchanges 
the qubits X{ and for % — 1, 



DFT 



,n) 








j^®2n . "Q 





and therefore the matrix entry DFTr g m equals (— f or a n g^h E W n , where 
we use the already mentioned enumeration of the group elements and the pairing 
\x defined in 



6 Sampling the Fourier Coefficients 

In this section we address the problem to gain enough information from the 
Fourier coefficients under DFTvp„ to find generators for the U P\U t part from fac- 
torization ([!]). The idea is to find generators for the balanced group (U- 1 , (U^ 1 ) 
from which we get generators for U D U l by taking orthogonal complements. 
First we want to describe the elements in U ± : 

Remark 6.1 Let U C W n . Then one of the following cases holds: 

a) U 1 - consists exclusively of elements of the form (x, y;0), i. e. U 1 - = U^HN. 
Since U^-dN is a subgroup ofW n it follows that U 1 - is a group, thus sampling 
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from an equal distribution over U 1 - will give generators after a few steps (for 
an exact analysis see below). 

b) There exists an element to = (x,y; 1) in U L . We can conclude that exactly 
half of the elements are inUHN and the other half is of the form t -UnN 
(see lemma U-31) - 

The following theorem shows that the Fourier transform for the groups W n 
have properties very similar to the abelian case: 

Theorem 6.2 Let DFT^ n = J2x yew n ^i x i V) \v) ( x \ ^ e ^ e Fourier matrix. Then 
for each subgroup U C W n we have: 



DFT ^]>>> = tL £ \y) ■ 



Proof: Since 



DFT WnTjjr^2\x) = I Y v{%,y) \y) (x\ ) Y^ 

' ' x&J \x,y£W„ J x£U 

= Y £m^) \y}> 

it suffices to show J2 xeU n(x,y) =0 for y U^, but this statement is lemma 
16| . The other case J2 x gu ^ip^iV) = 1^1 f° r V e ^ ± * s obvious. 

□ 

Next we show that sampling yields also information about U in case we have 
drawn a coset goU instead of U. In case go G N we indeed sample from U, since 
iV acts diagonally in the Fourier basis with phase factors ±1, i.e. 

DFTwn W\ E ' x > = wr\ Y \y) 

with certain phase factors <f go , y which depend on go and y but are always from 
{±1}. Since making measurements involves taking the squares of the amplitudes 
we get an equal distribution over U^. 

The other case go £ W n \ N leads to an equal distribution over (t/*) -1 , since 
an element go = nt,n e iV operates up to phase factors like t in the Fourier basis 
and t swaps (x, y; a) and (y, x; a) when considered as basis vectors of the Fourier 
basis. 
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6.1 Analysis of Sampling 



By the preceding observations we are able to take samples equally distributed 
from the sets U ± and (U 1 ) 1 - according to whether go G iV or go G W n \ N. Both 
cases occur with probability 1/2 since [W n : N] — 2. We now have to show that 
after a few samples we have found generators for the group (U- 1 , (t/*) -1 ) generated 
by U ± and (W)^. 

We denote the set of sampled elements after the i-th measurement by Si and 
have to give a bound on the probability that Si generates this group. 

Lemma 6.3 For the probability P of finding a set of generators after i samples 
we have the following estimation 

P((£ l ) = (U ± ,(U t ) ± ))>l-2-*/\ 

Proof: We already know that U L H N and (U 1 ) 1 - fl iV are groups. Also we know 
from remark |6.1| that if there is one element in L r_L which is not in N then exactly 
half of the elements in U 1 - must be in N and the other half in W n \ N. The same 
argument holds for {U 1 )^. Thus in the worst case we are facing the situation, 
that with each sample we fall into one of the boxes 



u^nN 



(u 1 - n N) ■ t (UY n iv ((uY nN)-t' 



(with certain elements to an d t' Q from W n \ N). The probability not to have 
generated U 1 - fl iV and (U 1 ) 1 - fl iV after i steps is smaller than 2~ 1 I A . From the 
other two sets only one element is necessary to discriminate between the index 1 
and index 2 case and so the statement follows. □ 
One remark is in order, since it is necessary to have a criterion when to stop 
sampling: Arguing like in |§, suppose the group generated by Si is to small, i. e., 
after taking duals we are dealing with U' D U . Then one of the generators found 
must necessarily evaluate to a different value than the neutral element of U does. 
This is due to the promise about / and can be checked in polynomial time by 
comparing the values on all generators found. 



7 The Quantum Algorithm 

Using the results of the preceding sections we can now formulate a quantum 
algorithm which solves the hidden subgroup problem for the non-abelian groups 
W n . It uses 0(n) evaluations of the black box quantum circuit / and the classical 
post-computation, which is essentially linear algebra over F2, also takes a number 
of operations which is polynomial in n. 

Algorithm 7.1 1. Prepare the ground state 

\<pi) = |0...0)®|0...0) 

in both registers. 
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2. Achieve equal amplitude distribution in the first register, for instance by an 
application of a Hadamard transform to each qubit: 

XEWn 

(Normalization factors omitted.) 

3. Calculate f in superposition and obtain 

M = E i*) !/(*)> 

x€W n 

4- Measure the second register and obtain a certain value z in the image of f . 
In the first register we have a whole coset golf of the hidden subgroup U: 

\<Pa) = E l x ) I*) = E \ x ) 1^ ' 

f(x)=z xEg U 

(Like in the case of Simon's algorithm, this step can be omitted.) 

5. Now solve the hidden subgroup problem for the normal subgroup N , which 
is the base group of W n . This can be done by application of the standard 
algorithm for 73^ on the first 2n qubits. 

6. Application of the Fourier transform on the first register using the circuit 
given in section [| transforms the coset into a superposition of the form 
'Yjx^u 1 - Vgo,y \v) ^ n case 9o £ N (with certain phase factors (p go , y which de- 
pend on go and y and are from {±1}). If go G W n \N we get a superposition 
over the conjugated group ^ Ig([/t) i (p 90ty \y) , 

7. Now measure the first register. With probability 1/2 we draw go from N 
resp. W n \N, i. e., we get a superposition over U ± resp. (U t ) ± which leads 
(by performing measurements ) to either equal distribution over U ± or equal 
distribution over (U t ) ± . 



8. Iterating steps 1.-7. we generate with high probability (see lemma 6.5 ) the 
group U 1 - PI iV and the group {U 1 ) 1 - fl N . 

What is missing are the sets (U 1 - fl N) ■ t and ((U t ) ± fl N) ■ t' Q with certain 
elements to and t' not in N. It is clear that it is sufficient to find only one 
element in one of these two sets, since then the whole group (f/- 1 , (f/*) -1 ) will 
be generated. But if any, there are many elements of this form in U 1 - resp. 
{U 1 ) 1 - since either there are none of them or exactly half of the elements of 
U L resp. (U 1 ) 1 - is not in U L fl N resp. {U 1 ) 1 - fl N . Summarizing: 

After performing this experiment an expected number of 4n times we gen- 
erate with probability greater than 1 — 2~ n the group (If- 1 -, (f/*) -1 ). 
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9. By solving linear equations over F 2 it is easy to find generators for 

((C/^, (c/*) ± )) ± = unu t . 

After all we get generators for U = (U D N) ■ (U D [/*). 

8 Conclusion and Outlook 

We have presented a family of non-abelian groups for which the hidden subgroup 
problem can be efficiently solved on a quantum computer. The quantum algo- 
rithm is followed by a classical post-processing involving standard linear algebra 
over the finite field F 2 which can be done efficiently on a classical machine. 

The groups discussed are certain wreath products W n and our approach uses 
a special property of the subgroups of W n to split the task of finding generators 
in two steps: First an abelian hidden subgroup problem is solved and next the 
non-abelian Fourier transform for W n is used to sample from two sets which in 
turn allow reconstruction of the hidden subgroup. 

It seems possible to generalize this result to arbitrary split extensions of the 
form Z2 XI ^ Z2 and to examine an approach using representation theory instead 
of the pairing used in the paper. 
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